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Privacy Statement 
for 

Virtual Policy Builder 




OontadiBQ Um Wab 8tte 

If you have any questions about this privacy statement, the practes of this site, or 
your deUng» vtfth thte Web tlto, you can contact 

Virtual Workspace 
250 East 6th Street 
Suite 610 

St Paul, MN 55101 

a j($virtu rfvwxtepace.com 
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Choose a screen name and identity for the training 
session by clicking on the screen name listed below 

Screen Names: 
Sasha: the warrior princess 
Alvin: the truck driver 
Josh: the surfer dude 
William, in© invesunerii Danger 
Alice: the domestic engineer 






(<)(>)( MAIN MENU )(eXIt) 



Title: Network Policy Management 

and Effectiveness System 
Inventors: Andrea M. Jacobson 
Attorney: Allen J. Oh, Reg. No. 42,047 

Sheet 18 of 51 



Figure 16 



a 




Choosing a Screen 
Identity 










Your training session number is: 






The session number is used to track and reference the 
training session in the policy effectiveness module. 
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Click on the training icon to enter the virtual training 
room. 

(^Training^) 


L 
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Meet the 
Facilitator 








Click on the picture to 
meet and interact with 
the facilitator and the 
other participants for this 
training session. 

ed Real Audio to listen to 
>r introduce the participants . 
ling rules. 
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Policy Suggestion 



Desktop Piracy 

Sug g ested Policy ; To comply with laws governing software protection from piracy 
employees must not: 

•Make copies of ray software unless explicitly authorized. 

•Exchange, trade or transfer copies of any software to others in 

cyberspace. 

•Download copses of software that normally would have to be purchased. 

•Purchase any software from the Internet without prior approval 
If you encounter pirated software or suspect software may have been pirated, notify the 
system admmisUator immediately end distance yourself from the real or suspected illegal 

activity. 

Pnemsic: Expect different people to have different standards. They are not better, not 
worse • simply different 

Principle : The principle of present choices states that current decisions tend to limit 
future action. This means that most important decisions affect two timeframe*. The short- 
term result may be a benefit but the long- term result can be either a benefit or, as often 
happens, a consequence. 



Do you agree or disagree with the suggested policy? 



What changes would you mike to me suggested policy? 



St*mtt 
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Policy Training 








rBooffiffmndation 
questions 
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(feus*) the program to: 

§ Review polcy recommendations and statistics from previous sessions 
§ Request additional information on a topic of subject presented during the 

§ Technical product support 
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Virtual Training 
Room 



Policy Feedback 

Alvin: No changes 
Josh: No changes 

William: > I hate getting an approval to download 
, software. I want that section changed. 



Facilitator: >Does the group think about downloading 
software and approvals? 

Josh: > Have to company make a list of approved 
software to download... Would that help you 
Will? Or do you want the option to download 
anything? 

William: > I could live with a list, as long as I can email 
the someone to approve of the software I 
want to have downloaded. 
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Writing the Policy 



Suggested Policy: To comply with laws governing software protection from 
piracy employees must not 

•Make copies of any software unless explicitly authorized. 

•Exchange, trade or transfer copies of any software to others in 

cyberspace. 

•Download copies of software that normally would have to be 
purchased. 

•Purchase any software from the Internet without prior approval 
If you encounter pirated software or suspect software may have been pirated, 
notify the system administrator immediately and distance yourself from the 
real or suspected illegal activity. 

Facilitator. If I am correct, you want this section added to the policy? 
Add»> A 11 software downloads can he approved by the system 

administrator. The user needs to email the system 
administrator to get approval for downloading the software. 
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Vote on a Policy 
Recommendation 






To comply with laws governing software protection from piracy employees 

miict nnf • 
musi iha. 

•Make copies of any software unless explicitly authorized. 
•Exchange, trade or transfer copies of any software to others in 
cyberspace. 

•Download copies of software that normally would have to be 
purchased. 

•All software downloads can be approved by the system 
administrator. All network user needs to email the system 
administrator to get approval before downloading the software: 
•Purchase any software from the Internet without prior approval 
If you encounter pirated software or suspect software may have been pirated, 
notify the system adrninistrator immediately and distance yourself from the 
real or suspected illegal activity. 

Do you agree or disagree with the policy? 
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Policy Consensus 








To comply with laws governing software protection from piracy employees 
must not: 

•Make copies of any software unless explicitly authorized. 
•Exchange, trade or transfer copies of any software to others in 
cyberspace. 

•Download copies of software that normally would have to be 
purchased. 

•All software downloads can be approved by the system 
administrator. All network user needs to email the system 
administrator to get approval before downloading the software. 
•Purchase any software from the Internet without prior approval 
If you encounter pirated software or suspect software may have been pirated, 
notify the system adirunistrator immediately and distance yourself from the 
real or suspected illegal activity. 
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Policy Training 

Main Menu 
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I 1 Start Policy Exam 






1 1 Review Policy Training Materials 






1 1 End Session 
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Policy Training Exam 
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What is spam? 

H A slang term for an electronic contract 

H A luncheon meat 

H A slang term for junk e-mail 

§ A term used for downloading files from the web 
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Training Feedback Form 




Was the subject pertinent to your needs and interests? 
No To some extent 
Vciy Much So 

Excellent Satisfactory Dissatisfacory 
Adequacy of Course Content 
Length of Course 
Adequacy of Course Materials 

Adequacy of Facilities 

ff nnv farfnr ic rat^H *Smcali<fagtnfv ,t nleaee nmvidfi mmlaimtifm* 
u any ifflwui is i«ucu uiiawniaiCTumijf t |jiv««g piuvniv ***** mmi wu« 

What was of least value to you in this seminar? 
What was of most value to you in this seminar? 

How will you apply this learning back on the job? 

Would you recommend this course for other individuals/teams? 
Yes No 
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Acceptable Use 
Agreement 




This agreement ts between the sanptoves and the user Indicated below. ! 




The user agrees to the following: 

1. AJ Information stared on the company system it tor educational, 
instructional or eoViiWstrallve purposes. Al data stored on the company 
computer wM be suitable for si audtences and thai not violate personnel 
privacy. 

2. Use of the computer system for commercial purposes it prohibited 

3. User accounts which are issued for the purpose of mating the organizational 
(county, program, etc.) Website mM have a designated primary user who Is 
responsWe for controSng access to the account The primary user wil not 
share his/her login tD and password with anyone outside the organizational unit, 
and wil change the password rep^sarfy. 

4. The company servers) system is an electronic comrrunity. Users are 
community members and as such must be considerate of other users. Thus, 
users wfl attend to their own lies and olrectories and leave others alone. Users 
thai inform the system adrrsniatrator, or the Manager If a probt em arises with 
your account or the servers). 

5. Users wi be good steward! of the electronic errvironment and wil not 
waste space, computing power or other user's time. 

6. Because this is an educational community, there are many chloten who 
have access to materials on the system. Users have a resportsfcttty to ensure a 
nurturing environment for our chfldren. Consequentty, users wH neither store 
not transme obscene, abusive or otherwise objectionable material on the 
system. Such actons wil result in prompt termination of system privileges. 

7. The company reserves the right to review any material stored on the 
system and wil remove any material which it beleves violates and element of 
this agreement. 


I 
I 
I 
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Acceptable Use 
Agreement 




CONTINUE 

6. The company operates a reliable and effective computing environment and 1 
network, however the company doe* not warrant that the system wfl meet any 
■peorfic user requirement or that the ivstem wfl be enof free or uninterrupted, 
i ne company snaa nor oe uarae wr any owec* or ifKsreci, fnaoerwBi or 
consequential damages sustained or incurred on connection wrth the use or 
inability to use the company system. 

User Signature 


Date: 
Manager 


Internet e-maJ address: 


CBck Icons to accept or detfno the terms of the Acceptable Use Policy. 


i 


C^AccepT^) CjDecline^) 
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The End 
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Thank your for participating in the 
policy training program. 
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User Profile 



Name: 

Employee Number 
Email Address: 

Employment status (i.e. temp, contract, virtual): 

OrganizattoruAVeporting chart : 

TOa: 

DepwtmentAJhttTrae: 
Bfanch/DMafon: 
Mai Address: 



USER PROFILE REPORTS 



User's Eflflptoyroent Ageementa and other contracts: 

Poacy Training and Exam status: 

Poicy Compliance Hstory 

Network ActMty Htotory 

Special Network Access or Privileges 

Emafl stofapa allocation 

Document access level 

User Access to inducing fancd locjn attempts 

All attempts to launch prtvieoed applications 

Any changes to system configuration parameters 

Software downloads from the Internet 

Software usage 

Hardware usage 

Sofh¥arepreaemonauset*8workstatoi 
User's system access and security status 
Identify need for upyades 
Identify need for training 
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REPORTS 
User access Indudbg Wted logjn attempts 


Al attempts to launch prfvieged applications 


I 
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Any changes to system configuration parameter* 
Software download! from the Internet 


Software usage 
Hardware usage 
Location of software 

Location of software Boense agreements 


Type of software agreements 

Coordination of software license agreements wrtth software utftatton 


Provide statistical and grapNcsJ justfftcaDon for software purchases, upgrades and 


maintenance expense 
Software Installation* 
Software compiance 

Appropriateness, Irapprcpriateness and excessive use of software, hardware 


resources throughout the enterprise. 

Number of people waiting far access to software appfcatlonfs) 


Access time 

vaJue of software being used at anytime 
Identify need for upgrades 
Identify need for training 

Projections for hardware, software and loensing costs/usage throughout the 


enterprise 

Preofct hardware demand 

Re-route software and hardware as indicated 

Personafy installed or permitted software installation 




Utffization of system resources 
Identify potential polcy farifririgemerrts 

Identify system trends per department use 1 
Allocation of related costs related to department 




(p^ (<) (main menu)(^end^(^rint) Q exit ^ 
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Audit 








To: PolAdm®Virtvom 
From: Sys©virtcom 
RE: Audit Reminder 
Branch Location: Minneapolis 
Time: 11:20 am 
Date: May 20, 1998 
CC: PoftcyeffectgNHrtcom 

Pc4Adm®virtcom 
Lan@vlrtcocn 




Audit Results 

Violations: 
Discrepanclesx 

CCcK on the report icon to complete policy violation report d 




1 

1 
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Network Policy Compliance Notice 



Reference Number: 

Posted-Date: 

To: 

From: 

Subject 



985h34 

Mon, 20 May 1998 16:17:36 -0500 (COT) 
Jane DoeQvirtcom 
PoflcyAdm © vlrt.com 
Violation Notice 



Network Non-Compliance Notice 



Name: 

Email Address: 
Title: 

Department/Unit Title: 
Branch/Division: 
Mail Address: 
Violation: 

Violation History: (hyperlink 
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Network Compliance 
Action Notice 



The policy advisor has taken the potential violation into advisement and 
has determined the following procedures: 



This is a Level 2 violation 



Follow the prompts to complete the violation reporting process for this 
level 2 violation. 

Click (start) to begin the violation reporting process. 
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Policy Compliance Report Form 






Violator's Name: 






Email address: 






Tide: 


Department: 


MaQ Station 


1 
1 




Violation: | Minor Violation g Major Violation 
Type of Violation: (choose from drop down box ) 


i i 


Branch Location: 
Date of Occurrence: 

Date of report 

Official reporting the incident 


1 


PoTtcy Administrator 
Additional details: 


1 Ok 1 1 Reset 1 1 Cancel 1 
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Network Compliance 
Action Notice 




The poGcy advisor has taken the potential violation Into advisement and 
has determined the following procedures: 

This Is a Level 2 violation 

Follow the prompts to complete the violation reporting process for this 
level 2 violation. 

Click (start) to begin the violation reporting process. 
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Policy Knowledge Query 




Name: 


Violation:! Minor Violation | Major Violation 
Type of Violation: (choose from drop down box ) 


I I 


Branch Location: 


Date: 


Poficv Administrator 


Additional details: 






I Search i I Reset I I Cancel I 


USER HELP J) Click icon for more information on how to 
v — ■ — — — - — respond to a violation report. 

: — — — 1 — 






G)(>) (mainmeni^(^en^ exit ^ 
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Policv Cornnliance Rooort Form 








VWatofa Name: 


1 




Email address: 






Title. 


Department 


Man Station 


1 


Violation:^ Minor Violation f| Major Violation 

I ypv o# viuiauun. yuwusts iium ui up uuwii ooa ) 




Branch Location: 
Date of Occurrence: 

Date of report 

Official reporting the Incident 


1 


Policy Administrator 

Additional details: 


1 Ok 1 Reset 1 1 Cancel 1 
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Policy Violation Code and Report 








The claim you submitted has been assigne<985h34 as its reference 
code. 

Encrypted email and surface mail copies of the policy violation claim 
report has been sent to: 

• Jane Doe 

• John Smith in Human Resources 

• System Policy Administrator 

• virtual worKopace, llu - a intra party policy organization 


(>) (5) (j <a,n men ^c5 en ^C^ rin l^ 1 





Title: Network Policy Management 

and Effectiveness System 
Inventors: Andrea M. Jacobson 
Attorney: Allen J. Oh, Reg. No. 42,047 

Sheet 45 of 51 . 



Figure 43 



System Violation Notice 

. Email and SnaB Main Notice 




Name: 

User Profile: 
Violation Type: 

Violation level: 
Branch Location: 
Time: 
Date: 

CC: 



File Attachments: 



Jane Doe 

(Review Profile from drop down menu) 
^tjg^jj^gail wrth conWentiei file 

Level 2 
Minneapolis 
11:20 am 
May 20, 1998 
Jsmith@Virlcom 
PolAdm@Virtcom 
PolicyQvirtualwor1apace.com 
Scheduling and violation report 



The system tmfcatee you have vWated a virtual poicy. Attached is a poicy 
violation claim report for your review. 

Wo vrifl need ytsur assistance to investigate the daim to determine It tt km Indeed 
accurate and If It warrants talher ctecueeion. Please foflow the procedures 



• Review the attached policy vWaflon claim report 

• Review your User's violation Hfctory fie at http7nvwwjiservi.com. 
- Indcate any dscreoandes In any of «ie reports 

• Indicate your svattafattty for an In-person foiow up meeting 

For further information cack the user icon (^UseT) 

All report and investigation information to automaticafly recorded in the system. 
Thank you for your cooperation. 
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Subsequent Action Report 



V 



Name: 

Violation level: 
Branch Location: 
Time: 
Date: 

CC: 



File Attachments: 



Jane Doe 

Level 2 
Minneapolis 
11:20 a.m. 
May 20, 1998 
JsmHh©Virtcom 
PolAdm@Virtcom 
PolicyQvirtualworkspace.com 
Subsequent Action Report 



Following the violation meeting, Human Resources and the user are 
required to file a subsequent meeting report to verify their attendance 
at the meeting. 



The report can be accessed by dick the report icon 



If you have any additional questions or concerns, you may contact the 
Poficy Administrator via email: PoiAdm@/irtoom or by calling 555- 
1212. 

If you do not agree with the outcome of the meeting, you may file for 
an appeal. To begin the appeal process, dick on the appeal icon 
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The Appeal Process 








The Appeal Process grants the user due process, including the 
opportunity id respond to an aitegoo violation in writing, i ne usbt is 
given the option to choose an appeal facilitator from the organization. 

The chosen facilitator Is emailed and granted security and read-only 
access to a user's file. The facilitator is automatically copied on all 
appeal process communications. The system records the all 
communications and written activity. 

Internal officers are automatically prompted and sent a notice to 
schedule the appeal meeting with the new facilitator. The process is 
reported, stored, and tracked in the policy effectiveness module. 

The appeal report is automatically sent to: 

• PoGcv Effectiveness 

• The policy officer and the user via email 

• The policy officer and the user via snaO mail 

The user is automatically sent information to inform him of his rights. 
To access further information, dick on the appeal IcorrfJj^J) 


i 
i 
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Policy Effectiveness Reports 

Compliance Reports 








Enter accass code: 

1 1 






Enter hardware token: 


i 

i 
i 




l l 

Choose reports) to review: 

User/User profiles 

Network nodes 

Department 

Division 

Branch 

Application 

Time duration 

Timeframe based on: 

Historical and statistical reports 

Current 

Year-to-date 

Custom time frames 

Other 
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Policy Effectiveness Reports 

Enterprise-Wide Reports 








Enter access code: 


I 


Enter hardware token: 


i 
i 
i 






Choose reports) to review: 

Policy compliance reports 
Risk assessment 

Strengths and weaknesses in policy compliance 

and non-compBance 

Email compliance reports 

Software compliance reporting 

Patterns, statistics and assessment of policy violations 

and non-compliance 
System backup reports 
Document tracking reports 
Auo5t and reconciliation reports 


(>) (^(main^ exit ^ 
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Policy Effectiveness Action 



Name: 

Violation level: 
Branch Location: 
Time: 
Date: 

CC: 

File Attachments: 



SystemAdm@Virtcom 

Level 2 
Minneapolis 
11:20 am. 
May 20, 1998 
Network® Virt com 
Policy@virtualworkspace.com 
Policy Effectiveness Action Report 



Policy Effectiveness has implemented a policy change for personal email 
usage. 

The new policy set the daily personal email usage at 35 messages vs. the 
previous 30 message limit The personal email policy can be accessed at 
http://www.poHcy4>ei3C^email.com 




PRINT 



EXIT 
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Policy Resources 




I | Policy Reference Library 

1 | Legal Research 

| | The Virtual Policy Manual 

1 | Policy Basics 

| | Software Resources 
including 

software listings and 
1 I updates 

1 | Software Registration 

Tech and User Support 
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